PortSwigger

PortSwigger launched Burp AT, an agentic AI system for automated penetration testing integrated into Burp Suite, now in public beta.

Leadership read: The launch of Burp AT commits PortSwigger to a fundamentally different product contract with its users. Burp Suite has historically been a toolset where human judgment drove every step of an engagement; Burp AT shifts the execution layer to autonomous agents while positioning the pentesters as boundary-setters and reviewers. That is not an incremental feature addition, it requires the product to handle session state, scope enforcement, and reproducible evidence chains at a level of reliability that manual tooling never needed to provide, because a human could catch the failure in real time. The public beta framing means those reliability standards are being stress-tested in production conditions now. The related-signals set is too diffuse, BYD EV launches, lunar mining prototypes, elderflower cocktails, to ground a tight pattern count in cybersecurity product launches specifically. On its own terms, Burp AT sits inside a visible but still-early wave of agentic AI being embedded directly into specialist professional workflows, rather than offered as a separate co-pilot layer. The shape is: domain-specific tooling provider, existing trusted workflow, autonomous execution with human override, a pattern appearing across security, legal, and engineering toolchains simultaneously. Companies at this stage of agentic product deployment face concentrated demand for engineering leadership at the intersection of agent orchestration and adversarial reliability, product operations capable of managing beta-to-GA transitions where failure modes carry professional and legal exposure, and go-to-market expertise in highly credentialed, skepticism-dense buyer communities where trust is earned through demonstrated precision rather than feature velocity.

curated · 2026-07-29 · context →